Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/6c353e-817d-4be9-b43f-c9fb9bb611b0/1/AUigUngcipGHCFfuGFs15MLIMU0.roa
File:                     AUigUngcipGHCFfuGFs15MLIMU0.roa (raw, json)
Hash identifier:          p9HESO4FiL7ng0QUsgbcSV1lRkt0mzKAXbF1Q5PweG0=
Subject key identifier:   01:48:A0:52:78:1C:8A:91:87:08:57:EE:18:5B:35:E4:C2:C8:31:4D
Certificate issuer:       /CN=29e123c1852d347cbd279e3045377c9cd510284a
Certificate serial:       01856F4B4DEF7D6898334F45C9569AE84064
Authority key identifier: 29:E1:23:C1:85:2D:34:7C:BD:27:9E:30:45:37:7C:9C:D5:10:28:4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KeEjwYUtNHy9J54wRTd8nNUQKEo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/6c353e-817d-4be9-b43f-c9fb9bb611b0/1/AUigUngcipGHCFfuGFs15MLIMU0.roa
Signing time:             Sun 01 Jan 2023 21:44:44 +0000
ROA not before:           Sun 01 Jan 2023 21:44:44 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     1239
IP address blocks:        193.3.169.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:4b:4d:ef:7d:68:98:33:4f:45:c9:56:9a:e8:40:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29e123c1852d347cbd279e3045377c9cd510284a
        Validity
            Not Before: Jan  1 21:44:44 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0148a052781c8a91870857ee185b35e4c2c8314d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b0:5a:62:92:0b:43:bf:19:85:ba:d1:0e:f2:
                    45:49:80:96:9b:9b:45:22:c5:41:da:8c:54:25:83:
                    3b:83:f0:55:6b:78:ab:c9:fc:0c:39:7b:51:4a:8e:
                    5f:ce:79:c9:31:d8:e8:37:61:3b:85:67:15:4b:60:
                    1c:a5:e3:c5:31:23:5c:a8:e0:4b:57:c2:ba:c6:71:
                    3d:b7:c4:b2:a2:8a:78:95:b1:cf:07:1c:25:10:af:
                    3b:ea:44:aa:73:c8:45:93:31:26:aa:c3:a2:1e:c9:
                    39:96:16:6c:b9:f4:10:05:20:3a:65:45:2f:6c:7d:
                    b3:e7:59:b3:53:28:d0:9d:13:52:9d:b5:12:37:8b:
                    c2:21:80:54:43:f6:7b:74:ee:da:60:79:b3:e2:5e:
                    86:f0:73:62:f5:ed:d7:bf:b5:06:11:02:5a:c2:2e:
                    d7:44:a0:ca:44:bf:d4:c9:52:2b:dd:ec:ed:fb:ce:
                    97:97:50:df:6d:d0:d3:bf:a0:1e:46:af:6a:7c:33:
                    33:2f:c4:cf:45:df:3f:51:65:71:7d:28:ec:45:ee:
                    15:79:9d:5b:5d:18:c6:25:1f:00:76:21:d5:ac:68:
                    06:b5:39:1b:89:f6:72:3d:be:3c:c3:c8:ab:18:04:
                    e7:5f:d4:21:d9:07:12:24:c5:08:87:25:1d:d8:66:
                    d1:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:48:A0:52:78:1C:8A:91:87:08:57:EE:18:5B:35:E4:C2:C8:31:4D
            X509v3 Authority Key Identifier:
                keyid:29:E1:23:C1:85:2D:34:7C:BD:27:9E:30:45:37:7C:9C:D5:10:28:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KeEjwYUtNHy9J54wRTd8nNUQKEo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/6c353e-817d-4be9-b43f-c9fb9bb611b0/1/AUigUngcipGHCFfuGFs15MLIMU0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/6c353e-817d-4be9-b43f-c9fb9bb611b0/1/KeEjwYUtNHy9J54wRTd8nNUQKEo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.3.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:ad:02:d6:79:77:d1:38:b2:0d:cb:04:79:9d:7e:ab:fd:df:
         d8:f1:3a:05:e1:17:8c:e1:d4:ab:be:67:62:1f:9a:04:ba:71:
         35:d1:85:21:b3:5b:63:4a:2a:fe:4a:6e:02:23:32:6d:66:69:
         a0:70:ef:a2:a5:26:22:5e:c2:94:25:d8:aa:19:dd:52:4a:08:
         ec:44:e8:83:99:0e:40:7f:02:7a:78:45:9c:25:2b:c5:99:4f:
         d3:73:2b:0e:26:63:a0:b6:c5:37:4e:f0:1f:5e:2b:cc:72:a7:
         6b:83:f4:81:8b:56:20:bc:f0:83:4c:dc:19:a3:19:b3:62:f1:
         d9:93:0b:e1:86:a8:79:4f:cb:92:82:66:2a:9f:58:57:cc:38:
         12:16:32:02:a0:10:f3:de:75:ab:7e:56:99:27:55:8a:b6:bb:
         7a:d4:68:39:64:fe:df:e8:3e:3c:17:b6:1a:50:a2:d5:b7:5a:
         a2:db:ad:bf:8f:72:1f:20:ed:c5:83:3d:84:fc:51:96:ad:9f:
         b7:74:cb:d5:ba:ea:de:fb:1e:2f:7d:8b:e8:e7:e2:e7:a0:1b:
         90:21:d8:af:54:eb:47:8b:3f:6f:a6:70:ff:fc:12:6d:0f:74:
         7a:3e:24:ee:1d:ed:20:0a:3d:62:7d:5c:1e:51:18:32:c0:c5:
         17:4d:bd:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:18 2023 by rpki-client on console-ams.rpki-client.org